Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: /sIzksCVEspMPmIFzxqLiHe0FtHQ4mYinOeTG/b69SA=
Subject key identifier: 94:70:95:DC:09:0E:67:CD:4B:2A:1F:6F:75:C9:BF:6C:86:67:31:13
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 01960DC531E512F20E2AE5CD9082FE100BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 01:02:29 +0000
Manifest this update: Mon 07 Apr 2025 01:02:29 +0000
Manifest next update: Tue 08 Apr 2025 01:02:29 +0000
Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: Q6A0oDqr1SwraWr2Ykex9zhvLlNQbqcXRkfSib0Hui4=)
3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c5:31:e5:12:f2:0e:2a:e5:cd:90:82:fe:10:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Apr 7 01:02:29 2025 GMT
Not After : Apr 8 01:02:29 2025 GMT
Subject: CN=947095dc090e67cd4b2a1f6f75c9bf6c86673113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:69:d5:34:27:96:2b:d1:7a:64:57:30:97:10:
6d:1d:e7:36:75:91:b5:0e:f6:79:4a:26:f4:4a:4a:
95:7f:2c:8d:dd:ae:2e:44:fb:d1:03:f1:bb:65:7b:
33:30:a1:02:59:47:db:cf:12:50:43:0e:ed:a1:37:
ab:e0:6c:fb:b9:26:c2:51:b4:bb:c4:1b:65:05:f8:
c4:1a:53:2f:4d:0e:a2:0f:af:2b:95:d2:a2:88:5d:
13:1c:5e:3c:74:6b:a3:2e:e0:a0:29:f3:e3:5b:37:
89:1b:f8:ec:2b:37:ff:50:39:d6:ae:99:e4:63:a0:
36:83:7c:33:11:2b:65:3e:71:c9:9b:91:31:3a:13:
9b:3a:96:fc:ec:0b:0c:cb:3a:ca:cf:37:81:36:04:
c7:39:93:80:59:61:7c:04:14:e8:00:90:dd:df:f2:
aa:0b:b6:8f:f8:f8:41:89:4a:5d:60:84:a3:52:22:
bb:f2:92:a6:f5:e3:72:3b:ed:80:fb:6a:0c:48:9e:
b3:32:c6:46:c4:38:e6:8e:38:8f:1b:50:c1:60:cd:
9e:37:51:d5:dc:e0:ae:55:48:6a:fd:7b:50:3e:48:
e2:7f:59:ad:e0:82:de:62:71:5c:e5:4b:6c:2c:e4:
0b:76:8d:ca:70:16:72:36:c2:59:45:5b:43:cd:a6:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:70:95:DC:09:0E:67:CD:4B:2A:1F:6F:75:C9:BF:6C:86:67:31:13
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:85:9b:a8:d8:03:48:a9:d6:9a:06:a0:96:6e:b8:8a:37:
2b:ff:45:62:10:1b:51:76:6b:b4:ec:3a:2c:dc:a9:e2:72:f6:
a8:38:f4:8c:97:58:2c:c1:7e:ca:04:99:3d:4a:27:7e:51:48:
27:e3:c0:fd:08:4b:fe:13:93:59:9c:ac:a9:a4:68:a6:02:45:
ed:c4:5f:b7:e2:a2:23:5a:f4:04:ad:dd:12:4b:ec:f2:4f:20:
26:d9:64:8b:55:46:68:2e:8a:bc:c3:9d:cc:84:9f:cb:e6:ec:
24:91:fc:5b:e4:27:a3:96:80:62:ce:16:fe:b1:0e:fd:9d:f0:
de:5d:54:40:0d:3e:87:e6:ee:56:be:d9:b6:ac:3f:06:65:af:
9d:36:05:b6:fb:21:4b:55:d8:ed:a2:30:bf:4b:d6:93:74:b3:
72:56:71:92:10:f0:ba:3a:de:98:06:f3:b4:f6:ea:c2:c3:cc:
2c:c2:7a:c5:76:9c:da:f8:42:12:b4:b5:f2:e1:d6:dc:12:a5:
90:d2:63:c3:ed:0b:f3:38:0a:7b:d4:18:09:d2:ac:ff:37:2c:
12:2f:f8:b2:70:8d:be:80:99:6d:2a:76:e7:6e:bf:64:1c:4e:
14:60:17:25:27:0f:e5:23:bf:da:49:42:1d:50:c8:dc:99:a7:
cc:95:d4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYNxTHlEvIOKuXNkIL+EAuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx
MzUwYTEwHhcNMjUwNDA3MDEwMjI5WhcNMjUwNDA4MDEwMjI5WjAzMTEwLwYDVQQD
Eyg5NDcwOTVkYzA5MGU2N2NkNGIyYTFmNmY3NWM5YmY2Yzg2NjczMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WnVNCeWK9F6ZFcwlxBtHec2dZG1
DvZ5Sib0SkqVfyyN3a4uRPvRA/G7ZXszMKECWUfbzxJQQw7toTer4Gz7uSbCUbS7
xBtlBfjEGlMvTQ6iD68rldKiiF0THF48dGujLuCgKfPjWzeJG/jsKzf/UDnWrpnk
Y6A2g3wzEStlPnHJm5ExOhObOpb87AsMyzrKzzeBNgTHOZOAWWF8BBToAJDd3/Kq
C7aP+PhBiUpdYISjUiK78pKm9eNyO+2A+2oMSJ6zMsZGxDjmjjiPG1DBYM2eN1HV
3OCuVUhq/XtQPkjif1mt4ILeYnFc5UtsLOQLdo3KcBZyNsJZRVtDzabC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRwldwJDmfNSyofb3XJv2yGZzETMB8GA1UdIwQY
MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt
MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4
LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8+Fm6jY
A0ip1poGoJZuuIo3K/9FYhAbUXZrtOw6LNyp4nL2qDj0jJdYLMF+ygSZPUonflFI
J+PA/QhL/hOTWZysqaRopgJF7cRft+KiI1r0BK3dEkvs8k8gJtlki1VGaC6KvMOd
zISfy+bsJJH8W+Qno5aAYs4W/rEO/Z3w3l1UQA0+h+buVr7Ztqw/BmWvnTYFtvsh
S1XY7aIwv0vWk3SzclZxkhDwujremAbztPbqwsPMLMJ6xXac2vhCErS18uHW3BKl
kNJjw+0L8zgKe9QYCdKs/zcsEi/4snCNvoCZbSp2526/ZBxOFGAXJScP5SO/2klC
HVDI3JmnzJXUBw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:36 2025 by rpki-client